A patch release, 1.5.1, of the XML-Security-C library is now available on the download site.
http://santuario.apache.org/dist/c-library/ The change log is updated with the issues corrected in this release including the HMAC security fix and a couple of other reported bugs. -- Scott